Wazuh User Presence Monitoring Ruleset

I'm looking for an experienced cybersecurity specialist to develop a Wazuh ruleset for user presence monitoring, leveraging OAuth and MFA2 or MFA3 data for login controls.

Requirements:
- User sign-in presence data collection, linking with Keycloak for serialized authentication.
- Need to monitor mail checking and browser access.
- Collect user signature data on:
- Browser access details
- Nearby devices

Ideal Skills and Experience:
- Expertise in Wazuh and cybersecurity monitoring tools
- Familiarity with OAuth, MFA protocols, and Keycloak integration
- Experience in user activity and presence data collection
- Strong understanding of privacy and data security considerations


deliverables:
authentication server
sysmon for linux or windows
data parsing db and integration with oauth/mfa tools
documentation